September2013 …€¦ · © 2013 IBM Corporation IBMCloud$Brieﬁng$–Open$Stack$ $ $ $ September2013 US(Federal(CTO:(Washington(DC(,(Open(StackEvent($ $ $ Ramesh$Menon,$Chief$Architect

© 2013 IBM Corporation

IBM Cloud Briefing – Open Stack

September 2013

US Federal CTO: Washington DC , Open Stack Event

Ramesh Menon, Chief Architect | Cloud Technology Leader IBM SoCware Group , Federal CTO – Strategy & Technology

© 2013 IBM Corporation 2

New Modes of Engagement Systems of Record

Data & Transaction Integrity Smarter Devices & Assets

IT Optimization •  Data & Transactions

•  App Infrastructure •  Virtualized Resources

Innovation •  Expanding Interface Modalities

•  Big Data and Analytics •  Social Networking

Next GeneraFon Architectures

New models of product & service innovation are emerging

OperaFons Analysis

Security Intelligence

Enterprise ApplicaFons Smart

Assets Mobile Users Call

Center Hybrid Clouds

Data center

22% CAGR

Asset-‐to-‐asset

35% CAGR

Mobile

78% CAGR


OpenStack is a global collaboration of developers and cloud computing technologists that seek to produce a ubiquitous Infrastructure as a Service (IaaS) open source cloud computing platform for public and private clouds. OpenStack was founded by Rackspace Hosting and NASA jointly in July 2010. 190+ companies and a community of over 119,000 members in 130 countries.

The OpenStack Foundation is Open for Business

§  OpenStack Identity (shared services) Unified authentication across all OpenStack projects and integrates with existing authentication systems.

§  OpenStack Dashboard (core) Enables administrators and users to access & provision cloud-based resources through a self-service portal.

Code available under Apache 2.0 license. Design tenets – scale & elasticity, share nothing & distribute everything

http://openstack.org/

§  OpenStack Compute (core) Provision and manage large networks of virtual machines

§  OpenStack Object Store (core) Create petabytes of secure, reliable storage using

standard hardware §  OpenStack Image Service (shared services)

Catalog and manage massive libraries of server images

Platinum Members

AT&T

Canonical HP IBM

Nebula Rackspace

RedHat SUSE

Gold Members

Cisco

Cloudscaling Dell

Dreamhost ITRI/CCAT

Mirantis Piston Yahoo


OpenStack Infrastructure Management SoCware The framework for IBM SoCware Defined Infrastructure

OpenStack API

Server Storage Network

SD Infrastructure APIs • Services and Resources • Server, Storage and Network • Broad Ecosystem Forming

Cinder Nova Neutron

drivers drivers drivers

v7000 EMC

OpenFlow DOVE

ESX KVM Hyper-V

PowerVM PR/SM2

Vendor Led Scalable Model • Drivers provided by the vendors • Broad Ecosystem Forming • Management standardization

SVC

SD Infrastructure Services • Software Image Services •  Infrastructure Patterns • VM Placement Intelligence

IBM Differentiation provided via

extensions and value added services

IBM Confidential

new name for “quantum”


Simple Layers of Cloud

Compute Network Storage

Hypervisor

Provisioning

Orchestration Lifecycle Managem

ent

Security

© 2013 IBM Corporation 6 6 Governance

Security, Resiliency, Performance & Consumability

Cloud ServiceCreator

Cloud Service ProviderCloud ServiceConsumer

Cloud Services

IaaS

PaaS

SaaS

BPaaS

Common CloudManagement Platform

OSS – Operational Support Services

BSS – Business Support Services

Subscription Management Pricing Entitlement

Management

Metering Rating Billing

Clearing & Settlement

Accounts Payable

Accounts Receivable

Customer Account

Management

Service Offering Catalog

Service Offering

Management

Contracts & Agreement

Management

Service Request

Management

Order Management

TransitionManager

DeploymentArchitect

OperationsManager

Service Provider Portal & API

Inf rastructure

Security &Risk Manager

CustomerCare

ServiceManager

BusinessManager

Service Consum

er Portal & API

Service Developm

ent Portal & API

Existing & 3rd party services, Partner

Ecosystems

Service Creation

Tools

Cloud Service

IntegrationTools

ConsumerIn-house IT

ProvisioningIncident & Problem

Management

IT Service Level

Management

Service Automation Management

Service Delivery Catalog

Service Request

Management

Change & Configuration Management

Image Lifecycle

Management

Monitoring & Event

Management

IT Asset & License

Management

Capacity & Performance Management

Platform & Virtualization Management


A layered and open cloud architecture is necessary

Platform Services

Infrastructure Services

Backplane Fit for purpose PODS

Business Applications as

components Service Oriented

Architecture

OSLC



Increasing Cap

ability

Simple IaaS Services (VMs)

1

Cloud Governance

2

Advanced IaaS Services

3

Advanced IaaS services integrated with ITIL processes

4

VM provisioning & On-‐boarding

Role & AuthenPcaPon Management

Cloud Management

VM Image ConstrucPon

Image Management

Usage metering,

accounPng & chargeback

Virtualised Infrastructure Monitoring

Capacity Management and Planning

Event Management

Patch Management

Endpoint Compliance & Management

Backup & Restore

Storage Provisioning & AutomaPon Management

Network Provisioning & AutomaPon Management

Services OrchestraPon

Hybrid Cloud IntegraPon

Problem & Incident

Management

IT Asset Management

License Management

Change & ConfiguraPon Management

Service Desk

Release Management

Advanced security ( idenPty and access, security informaPon and events mgmt)

CEDC Macro & micro paZerns


1.  Customers are looking for end to end automation of cloud service delivery to achieve greater returns

2.  Provisioning play a key role, but is just one of many steps that must be automated 3.  Each customer has unique requirements to integrate with existing data center processes and

tools.

VM Provisioning

Real customer example

Why do we need an Orchestrator ?


Orchestration Layer / Self Service Catalog Repeatable Best Practice Services

•  Provision bare metal

OS fast & efficiently using best practices

Bare Metal OS

§ Leverages openStack

§ Hypervisor Agnostic

§ Network Agnostic

§ Storage Agnostic

§ Storage provisioning

§ Network provisioning

§ Compute provisioning

§ IBM Supported

Compute

Network

Storage

§ Virtual Security

§ Cost Management

§ ApplicaPon Monitoring

§ Database Monitoring

§  Patching § Inventory

§ AutomaPon / DR / Move

§ Workload Management

Management

§  Workload-aware Patterns

§  Graphical Application topology creation & deployment – single click

§  Dynamic Parameters @ Runtime

§  Workload aware, embedded SLAs

§  Performance & elastic computing.

Middleware

Database

§  Deploy applications as part of Compute or using preconfigured patterns.

Application

Deploy Managed Application Workflows

OS Compute Network Storage DB MW Application Monitor Security HA/DR

Approval required prior to next step in workflow

1. Provision Bare OS

New OS

2. Provision image, aZach to network and storage

IaaS

3. Provision MW & DB using paZerns

PaaS

4. Provision ApplicaFon

SaaS

5. Provision so^ware to manage infrastructure

Management

Business Value

Portal Server provides customizable user experiences while leveraging a common orchestration layer

Cloud / Next Generation Data Center

API’s

§ IBM SmartCloud Enterprise

§ rackspace §  Amazon

§ MSP’s

§ vCenter § other

3rd Party

6. Provision 3rd party resources

Agility

Related Standards & Organizations

CIMI & OVF

TOSCA

CCRA OSLC


Increasing Cap

ability


1

Cloud Governance

2


3


4


Usage metering,

accounFng & chargeback

VM Image ConstrucFon


Network Provisioning & AutomaFon Management

Services OrchestraFon

Hybrid Cloud IntegraFon

Service Desk

Backup & Restore

Release Management

Heat map assessment of capabiliPes (OpenStack)

Absent capability

Available capability (limited use case coverage)

More complete capability (more comprehensive use case coverage)

N/A capability

Cloud Management

Image Management

Virtualized Infrastructure Monitoring


Patch Management

Event Management

Storage Provisioning & AutomaFon Management

Change & ConfiguraFon Management

Licence Management

IT Asset Management

Problem & Incident

Management

Advanced security (IdenFty and access, security informaFon and event mgmt)

Role & AuthenFcaFon Management


Increasing Cap

ability


1

Cloud Governance

2


3


4


Service Desk

Backup & Restore

Release Management

Heat map assessment of capabiliPes (SCO Enterprise)



Patch Management

Event Management


Change & ConfiguraFon Management

Licence Management

IT Asset Management

Problem & Incident

Management


Role & AuthenFcaFon Management



Image Management

Cloud Management

Service OrchestraFon


Usage metering,



Absent capability

N/A capability




AddiPonal IBM value add

SmartCloud Orchestrator Enterprise

SmartCloud Provisioning

TSA

M

EC2

SCE

Ope

nSta

ck

Com

patib

le

Clo

uds

IBM adds Service Management Integration -

Image Library

Single Image & Composite Patterns Management

Automation Engine

BPM Process Server

IBM Tivoli Monitoring

(ITM)

SmartCloud Cost

Management

(SCCM)

Serv

ice

Man

agem

ent I

nteg

ratio

n

IBM Endpoint Manager

(IEM)

Patch & Security Compliance •  With IBM Endpoint Manager •  Cloud Governance capability

(CCRA) •  Enable Level 2 Cloud

maturity •  Licence Management

Tivoli Storage Manager

(TSM)

Backup & Restore •  With Tivoli Storage

Manager for Virtual Environments

•  Agent-less backups •  Cloud Governance

capability (CCRA) •  Enable Level 2 Cloud

maturity Tivoli Netcool OMNIbus

Event Management •  Tivoli Netcool OMNIbus •  Cross domain correlation •  Cloud Management

capability (CCRA) •  Enable Level 2 Cloud

maturity

SmartCloud Control Desk

(SCCD)

ITIL Service Integration •  With SmartCloud Control

Desk •  IT Asset Mgmt, Change

Mgmt, Service Desk, CMDB, Service Catalog

•  ITIL Managed IaaS capability (CCRA)

•  Enable Level 4 Cloud maturity

Orchestra)on,Engine,

Network Domain!

Storage Domain!

IT Management!Monitoring

Domain!Data Availability Domain!

Compute Domain

!Monitoring !

IT Asset Management!

Service Desk!

Storage Domain!

Change Management!

Provision Pattern

Network Domain!

Workload Orchestration

Workload aware placement, optimization and operation

Resource Orchestration!Onboard, provision, manage CPU,

Storage and Network

Service Orchestration Manage the lifecycle of business applications

DB App Web

Orchestrate integrated network domain management •  With IBM Tivoli Netcool

Configuration Manager (ITNCM)

•  Automated network device management (layer 2 & 3)

Orchestrate integrated storage domain management •  With Tivoli Storage Productivity

Center (TPC) (or with SVC) •  Heterogeneous storage

management, monitoring and configuration

Orchestrate integrated Change domain management •  With IBM Tivoli Application

Dependency Discovery Manager (TADDM)

•  IT and Application discovery & change mgmt

SmartCloud Entry

Hypervisor Management - IaaS Gateway

IBM Extensions for Workload Aware optimizations (DRS & HA)

Orchestrate integrated SECURITY •  With IBM Security Virtual Server

Protection for Vmware •  Agent-less intrusion protection •  Monitoring for security

compliance & security incident

Orchestrate integrated SECURITY •  With IBM Security QRadar SIEM •  Security Information and Event

Management correlation •  Anomaly and threat detection •  Vulnerability management

Image Creation


Increasing Cap

ability


1

Cloud Governance

2


3


4

Heat map assessment of capabiliPes (AddiPonal IBM value)

Role & AuthenPcaPon Management



Image Management

Cloud Management

Service OrchestraFon


Usage metering,



Event Management

Patch Management


Backup & Restore



Problem & Incident

Management IT Asset

Management Change &

ConfiguraFon Management

Service Desk



Licence Management

Release Management SCCD

SCO SCO SCO SCO SCO

SCO SCO + SCM OMNIbus SCO + IEM IEM TSM

TPC ITNCM SCO SCO ITIM + VSP + TAM + SIEM

SCCD IEM SCCD + TADDM SCCD UrbanCode

Absent capability

N/A capability




IaaS Cloud Maturity Model


SmartCloud Orchestrator Architecture

Infrastructure-as-a-Service (IaaS)

Network (Cisco, Juniper, Big

IP, NCNM…)

Dev Tools

Service Mgmt Monitor Backup & Restore Security/Patch Compliance

Storage (NetApp, StorWize,

Sonas, TPC…)

Compute (VMWare, KVM,

Hyper-V, PowerVM, zVM…)

IaaS Gateway

IBM

SC

E

Ope

nSta

ck

Com

patib

le

Clo

uds

EC2

TSA

M

Image Management

Patterns

Cloud Marketplace Workflow

Software Stacks


SoCware Defined Compute, Network & Storage Embracing OpenStack as a framework for storage, compute and networking within SDE

OpenStack Nova API Cinder Storage APIs OpenStack Network APIs

drivers

Network drivers

Storage

Driver Driver Driver

Heterogeneous Compute, Storage, Network

Server, Storage and Network Integration

Workload Definition

Workload Orchestration

Workload Definition & Orchestration

IBM Differentiation

Compute

drivers

VMware

ESX

vCenter

Hyper-V

Hyper-V

SC VMM

PowerVM

Power VM

PowerVC

zHyp

zHyp

zManager

KVM

KVM

RHEV-M (oVirt)

Policy-based Management and

Automation

Snapshot and Backup

Management

Management

Driver

Virtualization


MoPvaPon: Talk OpenStack APIs Across MulPple Vendors

19

OpenStack

nova service glance

service service

services EC2/AWS

nova service glance

service service

services CloudX

nova service glance

service service

services

OpenStack APIs

We want to talk OpenStack APIs to multiple vendor Clouds


IBM SmartCloud Orchestrator

Solution benefits Ø  Accelerate deployment of cloud services using reusable workload

patterns and IT process automation •  Self-service portal allows for selection of cloud services

from a predefined menu of offerings •  Intuitive graphical orchestrator helps compose and

customize workflows quickly and easily

Ø  Deliver interoperable open cloud services with support for open standards

Ø  Governance Services (OSLC support) •  Eases coordination of complex tasks and worklflows,

leveraging existing skills, processes and tools Ø  Platform Services (TOSCA Support) •  Simplifies deployment and lifecycle management of

middleware and application patterns Ø  Infrastructure Services (OpenStack Support) •  Provides support for highly flexible, scalable infrastructure

on heterogeneous resources Ø  Extensibility

•  Pre-built images, patterns, process / configuration automation through the Cloud Marketplace

•  Take advantage of patterns built for IBM’s PureApplication System for IaaS and PaaS

Ø  Measure the cost of cloud services, keep track of cloud service health, perform capacity management of the cloud resources

Reduce IT costs and accelerate delivery of business applications with an open and extensible orchestration platform that fully automates the delivery of IT services in a cloud environment

CapabiliPes

•  Cloud OrchestraPon •  Provisioning •  Usage & AccounPng / Metering •  Monitoring •  Capacity Management

Continuous delivery pipeline


An evoluPon in design, a revoluPon in experience

(The elements of PureFlex and PureApplication)

Management

Compute

Networking

Storage

Flex ib le C hoic e Built-‐in ex pertise • Integ ra tion by desig n • Simp lified Ex perience

Infrastructure Delivering Infrastructure Services

Application Platform Delivering Platform Services

Data Platform Delivering Data Services

IaaS PaaS / SaaS

Built in expertise • Integration by design • Simplified Experience


IBM PureFlex System: Integrated Infrastructure, built for cloud Flexibility to run your choice of applica3ons and middleware Deploy SCO on Pure = Cloud in a Box , Integrated cloud management plaBorm

Expert integrated: § Flexible infrastructure ‒ Compute (x86 & POWER) ‒ Storage ‒ Networking ‒ Advanced Flex System

technology

§ Unified infrastructure management § Built-in expertise - Infrastructure patterns

200% increase in performance of critical applications

66% faster setup time

Days to minutes for virtual machine deployment time

72% lower systems costs over 3 years Infrastructure

Delivering Infrastructure Services

Infrastructure


PureFlex

Infrastructure Platform



IBM Pa_erns of ExperPse opPmize leading soCware capabiliPes

Social Collaboration

Business Analytics & Data Warehousing

Security, Risk Management , Compliance

Data Management

Connectivity, Integration and SOA

App Infrastructure

Business Process Mgmt Mobile Development

and Connectivity

Asset and Facilities Management

* IBM intends to deliver these new software patterns in the future

IBM Notes and Domino*

IBM CastIron 6.4 IBM API Management 2.0 IBM DataPower Gateway Appliances (XG45, XI52)

BPM 8.5 ODM 8.5 WAS 8.5.5

Business Intelligence 2.0

Software Delivery and Lifecycle

Collaborative Lifecycle Management* Rational App Developer*

QRadar SIEM* QRadar Log Manager* IBM Security Access Mgr*

Solutions

WebSphere Commerce 7.0 WebSphere Transformation Extender w/Launcher 8.4.1 SAP Business Suite*

Mobile Application Platform 6.0

IBM Maximo Asset Management 7.5

Information Server 9.1 Compute Node Pattern

Patterns of expertise


Federal Data Center (FDC)

•  ConUS / Geographically dispersed for enhanced resiliency •  Federal Government customers only •  Separate caged area, biometric reader entry, security monitoring cameras, 24x7 security, locked racks, controlled access

•  US CiPzens Support •  Segregated Network Environment (TIC Enabled) •  Supports Federal Shared or dedicated networks •  Leverage shared infrastructure and management tools recognized within Federal government community as industry leading

•  ITIL Service Desk uPlizing Remedy •  UpPme InsPtute Tier III classificaPon •  Redundant city power feeds and Power DistribuPon Units (PDU) ‏

•  Meets FISMA NIST 800-‐53 and Federal Cost AccounPng Standards

Boulder, CO

Raleigh, NC

§  IBM Green FISMA Compliant Data Centers § Enterprise Systems Management §  ITIL Service Delivery § Service Desk Capability §  Industry Leading SLA’s

© 2013 IBM Corporation 25 25 25 25 25

SoClayer: global presence

•  13 data centers

•  Tier III+ •  SOC2 Compliant

•  10 additional points of presence WW •  100,000 servers, > 22M domains •  21,000 customers


AddiPonal InformaPon

http://www.youtube.com/watch?v=oD_tPND78Ug

https://www.ibm.com/developerworks/community/groups/service/html/communityview?

communityUuid=e5a54efe-3c9f-491b-af2a-e5400516b5aal

https://hub.jazz.net/learn


FCW/ IBM Federal Cloud InnovaPon Forum

Event Highlights October 3, 2013 The Willard InterConPnental Washington, DC from 8:00

am – 3:00 pm Speakers include Anne Altman, IBM GM Federal; Jim Comfort, IBM GM

Cloud; Lance Crosby, CEO SoCLayer; Duke Skarda, CIO SoCLayer Who should a_end? Mission (LOB), IT Influencers/decision-‐makers, CIOs;

Architects & Developers; Data Center Management professionals; AcquisiPon Professionals involved in Cloud procurements

One-‐on-‐One ExecuPve MeePngs with Jim Comfort, Lance Crosby or Duke Skarda

SoluPon center and demos for discussion with technical experts

Agenda

8:00 – 8:30 am Breakfast

8:30 – 8:45 am Welcome -‐ Anne Altman, GM, IBM Federal

8:45 – 9:45 am Key Note Speaker – Colin Powell

9:45 – 10:30 am Cloud as an Engine for InnovaPon & ProducPvity

10:30 – 10:45 am Break/ Demos

10:45 – 11:15 am Driving TransformaPon in Government thru Cloud

11:15 – 11:45 am Cloud w/o Compromise, featuring SoCLayer

11:45 – 12:15 pm Minimizing Risk thru Advances in Security

12:15 – 1:00 pm Lunch/ Demos

1:00 – 1: 30 pm Driving Open Standards in Cloud

1:30 – 2:00 pm Cloud Based Mission SoluPons

2:00 – 2:45 pm Next FronPers

2:45 pm Closing Remarks

To Register: h_ps://www.etouches.com/ereg/newreg.php?evenPd=72759&refernce=IBMSalesRep



Legal Disclaimer

•  © IBM Corporation 2013. All Rights Reserved. •  The information contained in this publication is provided for informational purposes only. While efforts were made to verify the completeness and accuracy of the information contained in

this publication, it is provided AS IS without warranty of any kind, express or implied. In addition, this information is based on IBM’s current product plans and strategy, which are subject to change by IBM without notice. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this publication or any other materials. Nothing contained in this publication is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software.

•  References in this presentation to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in this presentation may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any activities undertaken by you will result in any specific sales, revenue growth or other results.

•  If the text contains performance statistics or references to benchmarks, insert the following language; otherwise delete: Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon many factors, including considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve results similar to those stated here.

•  If the text includes any customer examples, please confirm we have prior written approval from such customer and insert the following language; otherwise delete: All customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics may vary by customer.

•  Please review text for proper trademark attribution of IBM products. At first use, each product name must be the full name and include appropriate trademark symbols (e.g., IBM Lotus® Sametime® Unyte™). Subsequent references can drop “IBM” but should include the proper branding (e.g., Lotus Sametime Gateway, or WebSphere Application Server). Please refer to http://www.ibm.com/legal/copytrade.shtml for guidance on which trademarks require the ® or ™ symbol. Do not use abbreviations for IBM product names in your presentation. All product names must be used as adjectives rather than nouns. Please list all of the trademarks that you use in your presentation as follows; delete any not included in your presentation. IBM, the IBM logo, Lotus, Lotus Notes, Notes, Domino, Quickr, Sametime, WebSphere, UC2, PartnerWorld and Lotusphere are trademarks of International Business Machines Corporation in the United States, other countries, or both. Unyte is a trademark of WebDialogs, Inc., in the United States, other countries, or both.

•  If you reference Adobe® in the text, please mark the first use and include the following; otherwise delete: Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries.

•  If you reference Java™ in the text, please mark the first use and include the following; otherwise delete: Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both.

•  If you reference Microsoft® and/or Windows® in the text, please mark the first use and include the following, as applicable; otherwise delete: Microsoft and Windows are trademarks of Microsoft Corporation in the United States, other countries, or both.

•  If you reference Intel® and/or any of the following Intel products in the text, please mark the first use and include those that you use as follows; otherwise delete: Intel, Intel Centrino, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.

•  If you reference UNIX® in the text, please mark the first use and include the following; otherwise delete: UNIX is a registered trademark of The Open Group in the United States and other countries.

•  If you reference Linux® in your presentation, please mark the first use and include the following; otherwise delete: Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Other company, product, or service names may be trademarks or service marks of others.

•  If the text/graphics include screenshots, no actual IBM employee names may be used (even your own), if your screenshots include fictitious company names (e.g., Renovations, Zeta Bank, Acme) please update and insert the following; otherwise delete: All references to [insert fictitious company name] refer to a fictitious company and are used for illustration purposes only.

Documents

September2013 …€¦ · © 2013 IBM Corporation IBMCloud$Brieﬁng$–Open$Stack$ $ $ $ September2013 US(Federal(CTO:(Washington(DC(,(Open(StackEvent($ $ $ Ramesh$Menon,$Chief$Architect